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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listing of claims in the 
application: 

Listing of the Claims: 

1 . (Currently Amended) A computer-implemented method for controlling exchange 
of private information associated with a client device, said method comprising: 

(a) receiving a request from the client device; 

(b) determining whether a privacy agreement is needed to respond to the 
request before private information associated with said client device is exchanged; 

(c1) determining whether a privacy agreement can be reached before private 
information associated with said client device is exchanged when said determining (b) 
determines that said privacy agreement is needed, wherein the privacy agreement 
includes a plurality of components and governs the exchange of the private information, 
and wherein said determining of whether said privacy agreement can be reached 
comprises: 

(c2) determining whether to accept at least one proposed privacy 
agreement by examining said at least one proposed privacy agreement, wherein 
said at least one proposed privacy agreement includes a plurality of components 
that govern the exchange of the private information associated with said client; 

(c3) negotiating at least one component of said at least one proposed 
privacy agreement when said determining (c2) determines not to accept said 
proposed privacy agreement; 

(c4) generating an accepted privacy agreement as a set of rules that 
govern the exchange of private information when said determining (c2) 
determines to accept said privacy agreement; and 

(d) thereafter producing a response to the request when said determining (c2) 
determines to accept said privacy agreement. 
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2. (Currently Amended) A computer-im^m^ method as recited , n c|ajm 1 
wherein the private information includes location information of the client device. 

3. (Currently Amended) A computer-imp^m^nfaH me thod as recited in claim 1, 
wherein said producing (d) comprises: 

(d1) receiving the private information associated with the client device; and 

(d2) producing the response to the request based at least in part on the private 
information. 



4. (Currently Amended) A computer-implemgnteH method as recited In claim 3. 
wherein the private information includes location information of the client device. 



5. (Currently Amended) A computer-implemented method as recited in claim 4, 
wherein the client device is associated with a network, and 

wherein the location information is at least one of client-provided and network- 
provided. 



6. (Currently Amended) A computer-implemented method as recited in claim 3, 
wherein said method is performed on a server. 



7. (Currently Amended) A computer-i mplemented method as recited in claim 6, 
wherein the private information is attached to the request. 



8. (Currently Amended) A computer-implemented method as recited in claim 1 , 
wherein the client device is a wireless device. 



9-10. (Canceled) 
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1 1 . (Currently Amended) A computer-imnte^ me thod as recited in claim [[9]] 
15, wherein the private Information includes location information of the client device. 

12. (Currently Amended) A computer-rmple m «nt^ m 0 «w as recfted jn daim ^ 
wherein the client device is associated with a network, and 

wherein the location information is at least one of client-provided and network- 
provided. 



13. (Currently Amended) A comDuter-imnlRm*nt*rj method as recited in claim 1 1 , 
wherein the request is received at the proxy server and the response is produced by the 
server device. 



14. (Currently Amended) A computer-implemented method as recited in claim 1 3, 
wherein the request includes the private information associated with the client device. 

15. (Currently Amended) A computer -implemented method for exchanging private 
information associated with a cli ent device to a server device via a proxy server 

wherein the private information in cludes location information of the client device, said 

method comprising: 

establishing an authorizati on agreement that authorizes the oroxv server to 
negotiate privacy agreements with s erver devices on behalf of the client device, wherein 
the privacy agreement defines a set of rules that g o vern the exchange of information 
between the client device and the server device: 

receiving a reouest at the p roxy server, wherein the reouest includes the private 
information associated with the client device and wherein a response to the reouest can 
be made bv the server device: 

receiving a proposed privac y agreement from the server device associated wfth , 
the reguest: 
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negotiating the privar^ agreement hy th e proxy server n n behalf of thg Htent 
device when the proposed privacy agreement ic not in ancnrrt with the miftp rWi™ 
agreement; 

accepting, by the proxy server for th» cl j ent device fhn proposed nnWy 
agreement as a privacy agreement, when the P r o DOSe d nrivan/ agreement « in a ~v^ 
with the a uthorization agreement; ag d 

A - method ao - r o citod in claim 14, whoroln oofet providing operates to provide the 
private information to the server device after said accepting of the proposed privacy 
agreement as the privacy agreement or after said negotiating of the privacy agreement. 

16. (Currently Amended) A computer-implemented method as recited in claim 15, 
wherein said providing operates to refuse to provide the private information to the server 
device when both the proposed privacy agreement is not accepted and negotiating of 
the privacy agreement is unsuccessful. 



17. (Currently Amended) A computer-implemented method as recited in claim [[9TJ 
15, wherein said method further comprises: 

determining whether an existing privacy agreement already exists for the server 
device and the client device; and 

bypassing said receiving of the proposed privacy agreement and said accepting 
of the proposed privacy agreement when said determining operates to determine that 
an existing privacy agreement already exists for the server device and the client device. 

18. (Currently Amended) A computer-implemented method as recited in claim 17, 
wherein said determining of an existing privacy agreement already exists comprises: 

identifying an existing agreement between the server device and the client 
device, the existing agreement having a predetermined coverage; and 

determining whether the reguest is covered by the predetermined coverage of 
the identified existing agreement. 
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19. (Cuirently Amended) A computer-mp^n^ method for controlling exchange 
of private information associated with a client device supported by a carrier network 
infrastructure, said method comprising: 

(a) receiving a request from the client device, the request being directed to a 
server device; 

(b) determining whether a privacy agreement is needed to respond to the 
request; 

(b1) determining whether a privacy agreement can be reached, when said 
determining (b) determines that said privacy agreement is needed, wherein said privacy 
agreement governs the exchange of the private information, and wherein said 
determining of whether said privacy agreement can be reached comprises: 

determining whether to accept at least one proposed privacy agreement 
by examining said at least one proposed privacy agreement, wherein said at 
least one proposed privacy agreement includes a plurality of components which 
define a set of rules governing the exchange of private information; 

negotiating at least one component of said at least one proposed privacy 
agreement when said determining determines that the privacy agreement should 
not be accepted; 

generating an accepted privacy agreement when said determining 
determines to accept a privacy agreement, wherein said accepted privacy 
agreement includes one or more components that define the accepted privacy 
agreement; 

(c) determining, based on said accepted privacy agreement, whether the server 
device is authorized to receive the private information associated with the client device 
when said determining (b) determines that a privacy agreement is needed; and 

(d) providing the private information to the server device associated with the 
request when said determining (c) determines that the server device is authorized to 
receive the private information associated with the client device. 



20. (Currently Amended) A computer-implemented method as recited in claim 1 9, 
wherein the client device is a wireless client device, and 
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wherein the private information includes location information of the client device. 

21 . (Currently Amended) A computer-imnl»m*ntaH met hod as recited In claim 1 9, 
wherein said method further comprises: 

(e) thereafter producing a response to the request at the server device. 



22. (Currently Amended) A comDuter-imniamAnterj method as recited in claim 21 , 
wherein said producing (e) comprises: 

(e1) receiving the private information associated with the client device; and 

(e2) producing the response to the request based at least in part on the private 
information. 



23. (Currently Amended) A computer-implemented method as recited in claim 22, 
wherein the private information includes location information of the client device. 



24. (Currently Amended) A computer-im plementeri method as recited in claim 1 9. 
wherein the request includes a URL, and 

wherein said determining (c) comprises: 

(d) comparing the URL of the request with a list of authorized URLs; and 

(c2) determining that the server device is authorized to receive the private 
information associated with the client device when said comparing (c1) 
determines that the URL of the request is found within the list of authorized 
URLs. 



25. (Currently Amended) A system for controlling information exchange between a 
wireless client device and server devices, the wireless client device being supported by 
a wireless network, said system comprising: 

a proxy server device operatively connected between the wireless client device 
and the server device, wherein said proxy server device manages distribution of private 
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information associated with the wireless client device to the server devices, and wherein 
said proxy server device includes at least: 

a storage area, said storage area stores information received from at least 
one of the wireless client device and from the wireless network; 

a privacy manager, said privacy manager operates to restrict the release 
of the information received from the wireless client device and the wireless 
network to the one or more of the server devices unless a suitable privacy 
agreement governing the use of the information is in place for the one or more 
server devices; and 

wherein said privacy manager is further capable of operating to: 

determine whether said privacy agreement is accepted, wherein 
said privacy agreement can be accepted by examining at least one 
proposed privacy agreement that includes a plurality of components which 
govern the exchange of privacy information associated with said client 
device; 

initiate negotiation of at least one component of said at least one 
proposed privacy agreement when said determining determines that said 
privacy agreement is not accepted; and 

g e n e rating generate an accepted privacy agreement as a set of 
rules that govern the exchange of private information when said 
determining determines that said privacy agreement is not accepted. 



26. (Original) A system as recited in claim 25, wherein the information received from 
at least one of the wireless client device and the wireless network comprises location 
information associated with the location of the wireless client device. 



27. (Original) A system as recited in claim 25, 

wherein the information received from the wireless client device and the wireless 
network comprises location information associated with the location of the wireless 
client device, and 
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wherein said system further comprises: 

a location manager, said Jocation manager performs a reconciliation 
and/or canonical^ process on the location information received from the 
w-reiess client device and the wireless network to produce a determined location 



28 



(Ongmal) A system as recited in claim 27, wherein said privacy manager 
operates to restrict the release of the determined location to the one or more of the 
server devices unless a suitable privacy agreement governing the use of the determined 
location is in place for the one or more server devices. 

29. (Original) A system as recited in claim 28, wherein the suitable privacy 
agreement is provided in a markup language. 

30. (Original) A system as recited in claim 28, wherein said privacy manager can 
further negotiate with the one or more server devices to establish a suitable privacy 
agreement 



31. 



(Original) A system as recited in claim 25, wherein said privacy manager can 
further negotiate with the one or more server devices to establish a suitable privacy 
agreement. 



32 



(Ongmal) A system as recited in claim 25, wherein the information received from 
at least one of the wireless client device and the wireless network comprises subscriber 
information associated with the subscriber of the wireless client device. 

33. (Original) A system as recited in claim 25. wherein the information includes 
private information and non-private information, and 

wherein said privacy manager restricts access to the private information but not 
the non-private information. 
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34-36 (Canceled) 



37. (Currently Amended) A computer-im plemented method as recited fn claim 1 , 
wherein said accepted privacy agreement includes the following principle components: 
a PROP, an agreelD. a final, a propURI, a postURL, a realm, an entity, an assurance, 
an agrexp, and an optional principal component: 



38. (Currently Amended) A computerHmplemanteri method as recited in claim 1 , 

wherein said privacy agreement is negotiated in accordance with a Platform for 
Privacy Preferences (P3P) protocol, and 

wherein said accepted privacy agreement includes one or more of the following 
principle components: a PROP, an agreelD, a final, a propURI, a postURL, a realm, an 
entity, an assurance, an agrexp, and an optional principal component. 

39. (Currently Amended) A computer-implemented method as recited in claim 1 , 
wherein said method further comprises: 

providing an accepted privacy agreement in a markup language. 

40. (Currently Amended) A computer-Implemented method as recited in claim 39, 
wherein said markup language can be XML. HTML, WML, and HDML. 



41. (Canceled) 



42. (Currently Amended) A computer-implemented method as recited in claim 1 , 
wherein said method farther comprises: 

subsequent to sard negotiating (c3) determining (c2) whether to accept at least 
one proposed privacy agreement. 
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43. (Currently Amended) A computer-im plemented method as recited in claim 1 9 r 
wherein said method further comprises: 

subsequent to said negotiating determining whether to accept at least one 
proposed privacy agreement 

44. (Currently Amended) A computer readable medium including at least computer 
program code for exchanging private information associated with a client device to a 
server device via a proxy server, wherein the private information includes location 
information of the clie nt device, said computer readable medium comprising: 

computer program code for establishing an authorization agreement that 
authorizes the proxy server to negotiate privacy agreements with server devices on 
behalf of the client device, wherein the privacy agreement defines a set of rules that 
govern the exchange of information between the client device and the server device; 

computer program code for receiving a request at the proxy serve r wherein the 
request includes the private infor mation associated with the client device and wherein a 
response to the request can be made bv the server device : 

computer program code for receiving a proposed privacy agreement from the 
server device associated with the request; 

computer program code for initiating negotiation of the privacy agreement by the 
proxy server on behalf of the client device when the proposed privacy agreement is not 
in accord with the authorization agreement; • 

computer program code for accepting , bv the proxy server for the client device. 
the proposed privacy agreement as a privacy agreement by the proxy server for tho 
cli e nt dev i oo , when the proposed privacy agreement is in accord with the authorization 
agreement; and 

computer program code for providing the private information to the server 
deviceflj] after said accepting of the proposed privacy agreement as the privacy 
agreement [[,]] or after said negotiating of the privacy agreement 
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45. (Previously Presented) A computer readable medium including at (east computer 
program code for controlling exchange of private information associated with a client 
device, said computer readable medium comprising: 

computer program code for receiving a request from the client device; 

computer program code for determining whether a privacy agreement is needed 
to respond to the request before private information associated with said client device is 
exchanged; 

computer program code for determining whether a privacy agreement can be 
reached before private information associated with said client device is exchanged 
when said determining determines that said privacy agreement is needed, wherein the 
privacy agreement includes a plurality of components and governs the exchange of the 
private information, and wherein said determining of whether said privacy agreement 
can be reached comprises: 

determining whether to accept at least one proposed privacy agreement 
by examining said at least one proposed privacy agreement, wherein said at 
least one proposed privacy agreement includes a pluralfty of components that 
govern the exchange of the private information associated with said client; 

initiating negotiation of at least one component of said at least one 
proposed privacy agreement when said determining determines not to accept 
said proposed privacy agreement; 

generating an accepted privacy agreement as a set of rules that govern 
the exchange of private information when said determining determines to accept 
said privacy agreement; and 

computer program code for thereafter producing a response to the request when 
said determining determines to accept said privacy agreement 
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